Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/aqfNAhUm-_UdIQeq4dhiq6BZlZU.roa
File: aqfNAhUm-_UdIQeq4dhiq6BZlZU.roa (raw, json)
Hash identifier: x1fATmncEFVdhcHn5voKySwXUpclL27fWrSbKRLrWMU=
Subject key identifier: 6A:A7:CD:02:15:26:FB:F5:1D:21:07:AA:E1:D8:62:AB:A0:59:95:95
Certificate issuer: /CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Certificate serial: 01856FF044E6901F6425980660B492C73D4F
Authority key identifier: CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/aqfNAhUm-_UdIQeq4dhiq6BZlZU.roa
Signing time: Mon 02 Jan 2023 00:44:55 +0000
ROA not before: Mon 02 Jan 2023 00:44:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57256
IP address blocks: 185.156.214.0/24 maxlen: 24
185.156.215.0/24 maxlen: 24
185.4.252.0/24 maxlen: 24
185.4.255.0/24 maxlen: 24
185.156.213.0/24 maxlen: 24
185.156.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 30 Jun 2023 08:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:44:e6:90:1f:64:25:98:06:60:b4:92:c7:3d:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb10243f98636faa0fb6c5ae6bad9b0abad23438
Validity
Not Before: Jan 2 00:44:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6aa7cd021526fbf51d2107aae1d862aba0599595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:c4:b4:2d:a6:52:82:5a:ee:a9:c0:d5:bb:06:
5e:9e:b4:75:fb:1a:42:ea:d0:2a:60:fc:f5:74:30:
1e:2f:a5:97:0f:e6:c5:a9:ab:26:5e:5b:aa:c5:6f:
d2:13:b6:f2:c0:4b:79:66:a8:91:a4:9c:0c:61:77:
0b:ed:a5:f6:3f:ab:d1:47:7f:1d:65:6f:83:69:e5:
79:47:86:5e:b1:9a:b0:0f:81:90:d5:e7:c3:91:4d:
48:32:8b:04:f8:eb:63:61:a7:d4:e1:5d:bc:e1:1f:
83:48:d2:de:67:72:a1:41:31:ba:03:81:d0:af:28:
ce:12:81:14:51:40:3c:6a:2d:8b:9a:1e:2e:df:c5:
18:81:88:8d:d0:e3:72:67:bf:a7:3f:92:4d:bb:85:
3a:ca:b4:4f:6d:e7:c9:02:b1:36:83:ce:44:3b:f6:
77:56:ce:08:40:18:9c:f4:90:a5:63:17:7d:71:74:
55:eb:4f:f7:42:0e:e7:c9:82:ff:f2:a0:9d:f9:9a:
8e:d3:2e:d0:3a:52:58:6b:ff:7f:89:cf:9d:a0:4b:
9f:d1:f8:3a:62:8c:4b:58:3c:32:68:c2:d8:e5:d6:
1b:b2:73:43:b8:6f:84:bf:0b:e6:64:8e:49:d2:14:
b9:e6:f8:df:2e:f7:4b:c5:59:95:7f:44:52:ef:01:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A7:CD:02:15:26:FB:F5:1D:21:07:AA:E1:D8:62:AB:A0:59:95:95
X509v3 Authority Key Identifier:
keyid:CB:10:24:3F:98:63:6F:AA:0F:B6:C5:AE:6B:AD:9B:0A:BA:D2:34:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxAkP5hjb6oPtsWua62bCrrSNDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/aqfNAhUm-_UdIQeq4dhiq6BZlZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/f8eb9c-5b99-4cef-93f0-48f151b5231f/1/yxAkP5hjb6oPtsWua62bCrrSNDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.252.0/24
185.4.255.0/24
185.156.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:84:5b:1a:15:73:ab:3c:e9:2f:b5:10:1a:22:d2:37:61:4d:
e9:04:d5:5a:92:ed:c9:1e:65:18:e7:f5:8f:b1:33:72:40:ff:
ad:9a:01:62:d9:de:35:00:f6:12:1f:63:90:3a:b3:91:5d:5c:
6d:34:f6:1b:44:b6:42:b5:6c:dc:ff:d1:14:28:e4:7d:4b:70:
92:d1:4f:00:9d:91:75:a5:88:e3:ca:87:86:50:df:21:79:33:
49:09:0d:1a:2b:71:a8:c9:32:2a:88:26:1f:e8:6d:c0:21:8f:
f4:90:c3:e9:92:ee:d8:63:62:19:43:9a:d1:1d:12:b0:35:75:
6e:72:35:1c:b2:97:4a:a7:86:73:21:2e:e4:2f:11:49:cb:ae:
47:55:ac:17:2d:0f:b6:e4:77:f6:f5:1b:f7:0e:2d:d5:5a:a4:
7b:52:e1:6a:a5:37:39:d8:9d:77:7f:85:a4:62:71:41:de:ed:
5f:d2:b9:ad:14:a0:21:fe:1b:10:3b:08:f1:63:87:d7:84:18:
81:23:77:f8:0b:a4:dc:c7:d0:92:1b:de:83:43:f5:10:b3:ff:
9f:35:e0:a9:8f:5d:bf:52:e3:06:61:d7:6a:82:a5:26:9c:26:
84:66:09:31:01:1c:23:f4:2a:0c:2b:cb:e5:e7:c8:c1:72:fe:
25:07:e9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:18 2024 by rpki-client on console-ams.rpki-client.org